Description
Errands before 46.2.10 does not verify TLS certificates for CalDAV servers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mrvladus | Errands | < 46.2.10 | 46.2.10 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | errands | 46.2.10-1 | — |
| Debian 13 | errands | 46.2.8-1+deb13u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | errands | No fix yet | — |
| Ubuntu 24.04 LTS | errands | No fix yet | — |
References
- https://github.com/mrvladus/Errands/issues/401
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123738
- https://github.com/mrvladus/Errands/releases/tag/46.2.10
- https://github.com/mrvladus/Errands/commit/04e567b432083fc798ea2249363ea6c83ff01099
- https://github.com/mrvladus/Errands/compare/46.2.9...46.2.10